AO
Product
Apache OpenOffice
9
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Apache OpenOffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59265 | 8.8 | Oct 2 | Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover Affected: through 4.1.16; before 95923fd437e06edd38a4f0e139a27c755a6f3ba6; before 181421139242694b309751fb666406eddc203c50 |
| CVE-2025-64403 | 8.1 | Nov 12 | Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc Affected: through 4.1.15 |
| CVE-2018-11790 | 7.8 | Jan 31 | When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs Affected: Apache OpenOffice 4.1.5 and earlier |
| CVE-2025-64405 | 7.5 | Nov 12 | Apache OpenOffice: Remote documents loaded without prompt via DDE function Affected: through 4.1.15 |
| CVE-2025-64404 | 7.5 | Nov 12 | Apache OpenOffice: Remote documents loaded without prompt via background and bullet images Affected: through 4.1.15 |
| CVE-2025-64401 | 7.5 | Nov 12 | Apache OpenOffice: Remote documents loaded without prompt via IFrame Affected: through 4.1.15 |
| CVE-2025-64402 | 6.5 | Nov 12 | Apache OpenOffice: Remote documents loaded without prompt via OLE objects Affected: through 4.1.15 |
| CVE-2025-64407 | 5.3 | Nov 12 | Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables Affected: through 4.1.15 |
| CVE-2025-64406 | 4.3 | Nov 12 | Apache OpenOffice: Possible memory corruption during CSV import Affected: through 4.1.15 |
Showing 9